$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa File: b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa (raw, json) Hash identifier: 4Fj4Bc5J8Zqu7X3p9hbB6rFNg6iBzBMkqAMCDjS8GrE= Subject key identifier: 38:25:D5:62:05:50:80:F7:34:08:0F:D2:EA:6C:C7:5B:0F:28:1C:64 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D95F00825D62567F46B8BFB80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 9009 IP address blocks: 172.94.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:08:25:d6:25:67:f4:6b:8b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=381f5111-6607-435b-9808-e6c463d0bb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:11:e8:13:06:27:b9:4f:4c:4d:6b:da:81: 38:24:5d:27:60:97:29:25:38:ec:00:48:77:e6:29: c9:1c:0b:a5:75:f0:a1:7b:bd:87:8d:a1:52:04:a2: 27:06:f5:73:5e:e9:48:50:c3:f4:1d:c0:21:d9:03: e2:e2:3a:9a:87:6e:38:fd:e1:0c:88:14:f2:75:f1: aa:b8:78:c6:bd:e3:62:e8:c1:5a:ce:a4:78:45:24: 71:26:97:b0:e5:85:ff:1f:72:9c:63:1e:bc:87:67: 9e:c6:1b:68:29:27:00:87:36:83:c7:37:70:fa:30: de:3e:35:0e:86:21:b0:f3:47:58:01:60:af:af:d2: 15:bd:58:cd:59:41:a4:27:81:14:6f:a0:08:2f:e9: 22:4c:6a:28:a0:64:7a:ca:39:dd:24:e4:fc:f1:5a: 8e:7f:bd:ab:61:88:f3:c4:ea:62:47:85:20:69:00: 4a:a7:45:a6:ca:92:fe:82:65:44:67:35:18:59:15: 19:23:98:7e:5b:a8:66:58:9e:bf:7e:01:95:1f:a4: f0:a1:40:93:9b:f1:ab:d5:37:c9:d9:83:07:12:c4: b8:62:67:8c:21:84:c0:54:e7:01:0a:82:b2:2d:3f: 6b:33:88:b5:28:3f:a4:7f:b0:17:7b:a5:a0:f0:05: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:25:D5:62:05:50:80:F7:34:08:0F:D2:EA:6C:C7:5B:0F:28:1C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:94:f0:ad:55:55:c9:59:d8:d4:c1:1a:50:29:c5:9f:98:ea: b9:56:75:49:3d:a7:1e:ca:28:82:cc:92:0b:4a:a6:f7:fc:0f: fd:b6:38:18:b7:7d:7f:3a:00:41:c0:44:bd:67:c1:0b:44:93: 42:55:94:fa:bb:f0:3d:9a:c3:f9:e4:aa:de:44:4a:7e:d9:33: 59:e4:e3:25:1f:2a:0d:26:b0:77:a9:3b:80:dd:35:b3:a2:6b: e9:56:95:64:ab:6a:1e:c1:17:ee:38:8f:11:52:1a:5d:e8:67: cd:63:16:45:fe:ef:c4:20:c3:03:bc:bf:94:4e:06:f1:c7:25: 90:4a:98:f3:3b:68:77:b5:02:50:7c:b1:9d:6b:5f:9b:26:16: db:eb:55:7b:09:ac:22:54:2b:31:9e:1c:a6:3b:d9:1c:1f:9f: 48:d3:be:06:47:d8:48:5a:b4:18:c9:26:43:1f:90:73:03:96: 4a:c4:16:ef:de:1f:7c:7d:ff:f3:65:fd:dc:0f:b2:6e:66:ad: 4b:16:a2:ae:04:f7:4f:34:df:d9:48:46:7e:51:4c:bf:01:59: d1:d1:69:98:10:57:45:13:65:63:8a:10:66:73:45:ee:82:9f: e2:34:13:d7:f6:52:2d:00:b3:7a:b7:4b:1c:03:d7:85:52:80: 2e:14:39:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8Agl1iVn9GuL+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MzgxZjUxMTEtNjYwNy00MzViLTk4MDgtZTZjNDYzZDBiYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSMR6BMGJ7lPTE1r2oE4JF0nYJcpJTjsAEh3 5inJHAuldfChe72HjaFSBKInBvVzXulIUMP0HcAh2QPi4jqah244/eEMiBTydfGq uHjGveNi6MFazqR4RSRxJpew5YX/H3KcYx68h2eexhtoKScAhzaDxzdw+jDePjUO hiGw80dYAWCvr9IVvVjNWUGkJ4EUb6AIL+kiTGoooGR6yjndJOT88VqOf72rYYjz xOpiR4UgaQBKp0WmypL+gmVEZzUYWRUZI5h+W6hmWJ6/fgGVH6TwoUCTm/Gr1TfJ 2YMHEsS4YmeMIYTAVOcBCoKyLT9rM4i1KD+kf7AXe6Wg8AVZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgl1WIFUID3NAgP0upsx1sPKBxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjdmOWQyNmUtMmQwZS0z ZWM3LWIwMmItMzI0ZTE2MDE3NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaU8K1VVclZ2NTBGlApxZ+Y6rlWdUk9px7KKILMkgtKpvf8D/22OBi3 fX86AEHARL1nwQtEk0JVlPq78D2aw/nkqt5ESn7ZM1nk4yUfKg0msHepO4DdNbOi a+lWlWSrah7BF+44jxFSGl3oZ81jFkX+78QgwwO8v5ROBvHHJZBKmPM7aHe1AlB8 sZ1rX5smFtvrVXsJrCJUKzGeHKY72Rwfn0jTvgZH2EhatBjJJkMfkHMDlkrEFu/e H3x9//Nl/dwPsm5mrUsWoq4E908039lIRn5RTL8BWdHRaZgQV0UTZWOKEGZzRe6C n+I0E9f2Ui0As3q3SxwD14VSgC4UOdE= -----END CERTIFICATE-----Generated at Wed May 13 04:35:35 2026 by rpki-client